module "acm-alb" {
  source       = "../../modules/aws-so-ssl"
  dns          = var.public_dns
  service_tags = local.tags
}

module "acm-cdn" {
  source = "../../modules/aws-so-ssl"
  providers = {
    aws = aws.us-east-1
  }
  dns          = var.public_dns
  service_tags = local.tags
}

# References the existing, manually-issued *.waterwheel.datafy.co.za cert
# used for SNI on the public ALB's HTTPS listener.
data "aws_acm_certificate" "waterwheel" {
  domain      = "*.waterwheel.${var.public_dns}"
  statuses    = ["ISSUED"]
  most_recent = true
}

# module "hostedzone-private" {
#   source  = "terraform-aws-modules/route53/aws//modules/zones"
#   version = "~> 4.1.0"
#   zones = {
#     (var.private_dns) = {
#       comment = "${var.private_dns} private dns"
#       private = true
#       vpc = [
#         { vpc_id = var.vpc_id }
#       ]
#       tags = merge(local.tags, {
#         Name = var.private_dns
#       })
#     }
#   }
# }